Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EBA7F2666BF311EE844319644AD9E6FC.roa
File: EBA7F2666BF311EE844319644AD9E6FC.roa (raw, json)
Hash identifier: dUxqYakX6YUinsKZOgXvdc1rycFL6sB+zz4rEIqd8V0=
Subject key identifier: 2F:B3:D4:20:9C:E1:AC:F5:B7:5D:64:AD:2E:2D:8C:97:69:6E:E9:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12D9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EBA7F2666BF311EE844319644AD9E6FC.roa
Signing time: Mon 16 Oct 2023 07:16:27 +0000
ROA not before: Mon 16 Oct 2023 07:16:24 +0000
ROA not after: Wed 16 Oct 2024 07:16:24 +0000
asID: 834
IP address blocks: 154.16.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4825 (0x12d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 16 07:16:24 2023 GMT
Not After : Oct 16 07:16:24 2024 GMT
Subject: CN=652ce34b-cc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:b1:da:d4:cc:8c:73:7b:83:74:1a:7d:0a:
a4:fa:3e:d9:9e:1f:12:25:eb:c4:08:7c:3f:24:25:
9c:f5:74:b5:3c:d7:56:a4:03:ba:7f:61:78:43:66:
a3:8f:79:6c:17:bb:3f:12:e9:61:9f:84:64:bc:27:
ca:02:21:0d:a5:54:e6:30:08:3a:84:a0:5f:e7:3f:
fa:31:1f:39:84:48:14:e4:2a:fe:e6:16:c3:78:e4:
87:f3:54:a6:5b:a3:a0:8b:70:7e:33:fe:68:89:d7:
46:7c:5c:e8:b3:ec:97:63:86:34:8c:90:75:34:6e:
b3:98:83:81:7d:e8:91:8b:d5:a2:cc:75:94:77:11:
90:cb:db:18:e2:94:19:62:42:a9:85:06:3f:db:d9:
2b:83:1d:e5:70:e5:6d:07:bc:74:8a:eb:40:76:85:
98:b2:c2:a7:bc:e6:f1:b6:6e:9c:0b:70:ba:31:eb:
58:35:aa:71:32:cb:3d:51:0e:b1:11:77:d7:2c:76:
d7:37:cf:0f:89:69:82:71:23:0a:51:00:08:45:c4:
f5:ac:f7:61:49:17:8b:da:7d:4b:4f:b0:35:6d:a3:
f8:b1:44:71:b9:a4:e0:d7:7c:18:bc:05:9b:7c:59:
88:ac:e4:8d:e2:9e:4a:49:52:ba:64:f0:3e:64:4b:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:D4:20:9C:E1:AC:F5:B7:5D:64:AD:2E:2D:8C:97:69:6E:E9:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EBA7F2666BF311EE844319644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.230.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d9:0c:6b:9f:f1:7c:38:d6:28:a7:57:7d:a8:ff:61:0f:8e:
1c:0a:21:0e:db:48:cc:5e:62:57:41:11:0c:36:15:a0:3e:31:
e1:91:66:44:97:98:aa:ac:f2:2c:13:71:f5:c1:0d:47:da:52:
9a:e3:3c:a9:ac:ff:e1:6d:dd:cd:f1:26:80:1f:de:ee:a5:97:
ce:7b:cd:e6:7d:58:92:3f:48:11:c8:e3:8b:ac:c7:8a:24:bb:
4e:09:c5:b2:bf:b8:60:f2:6e:b7:f4:7e:00:32:73:1d:38:93:
af:43:bd:43:79:ee:17:3e:81:05:3e:5e:59:02:d3:15:fb:d3:
8b:b3:e2:37:42:b6:0c:4a:8c:c1:bf:9d:c1:bc:b8:86:5d:5d:
fb:6b:95:b7:30:ea:d3:71:83:8a:2e:f4:0d:75:12:71:d8:f0:
22:ae:9a:01:df:38:90:b2:03:fa:33:01:de:1b:02:74:b9:5e:
1c:83:98:f3:04:c6:8f:27:5d:fb:50:e7:ac:22:3f:bc:06:a8:
dd:13:b8:6d:db:de:1e:06:60:b5:11:a6:56:4e:b8:d1:43:8f:
d7:f2:19:2b:b7:38:c9:1f:70:a3:3f:44:98:47:fa:c9:65:d1:
55:e8:c6:43:07:56:19:de:68:ea:eb:b8:31:35:5f:01:34:f9:
1d:16:dc:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEtkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzEwMTYwNzE2MjRaFw0yNDEwMTYwNzE2MjRaMBgxFjAU
BgNVBAMTDTY1MmNlMzRiLWNjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWY7Ha1MyMc3uDdBp9CqT6PtmeHxIl68QIfD8kJZz1dLU811akA7p/YXhD
ZqOPeWwXuz8S6WGfhGS8J8oCIQ2lVOYwCDqEoF/nP/oxHzmESBTkKv7mFsN45Ifz
VKZbo6CLcH4z/miJ10Z8XOiz7JdjhjSMkHU0brOYg4F96JGL1aLMdZR3EZDL2xji
lBliQqmFBj/b2SuDHeVw5W0HvHSK60B2hZiywqe85vG2bpwLcLox61g1qnEyyz1R
DrERd9csdtc3zw+JaYJxIwpRAAhFxPWs92FJF4vafUtPsDVto/ixRHG5pODXfBi8
BZt8WYis5I3inkpJUrpk8D5kS4mnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUL7PU
IJzhrPW3XWStLi2Ml2lu6bMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0VCQTdGMjY2NkJGMzExRUU4NDQzMTk2NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOYwDQYJKoZIhvcNAQEL
BQADggEBANHZDGuf8Xw41iinV32o/2EPjhwKIQ7bSMxeYldBEQw2FaA+MeGRZkSX
mKqs8iwTcfXBDUfaUprjPKms/+Ft3c3xJoAf3u6ll857zeZ9WJI/SBHI44usx4ok
u04JxbK/uGDybrf0fgAycx04k69DvUN57hc+gQU+XlkC0xX704uz4jdCtgxKjMG/
ncG8uIZdXftrlbcw6tNxg4ou9A11EnHY8CKumgHfOJCyA/ozAd4bAnS5XhyDmPME
xo8nXftQ56wiP7wGqN0TuG3b3h4GYLURplZOuNFDj9fyGSu3OMkfcKM/RJhH+sll
0VXoxkMHVhneaOrruDE1XwE0+R0W3K4=
-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:20 2023 by rpki-client on console-ams.rpki-client.org